Share this post

Link to post

Share on other sites

E1M1 4

#include-once#region _Memory;==================================================================================; AutoIt Version: 3.1.127 (beta); Language: English; Platform: All Windows; Author: Nomad; Requirements: These functions will only work with beta.;==================================================================================; Credits: wOuter - These functions are based on his original _Mem() functions.; But they are easier to comprehend and more reliable. These; functions are in no way a direct copy of his functions. His; functions only provided a foundation from which these evolved.;==================================================================================;; Functions:;;==================================================================================; Function: _MemoryOpen($iv_Pid[, $iv_DesiredAccess[, $iv_InheritHandle]]); Description: Opens a process and enables all possible access rights to the; process. The Process ID of the process is used to specify which; process to open. You must call this function before calling; _MemoryClose(), _MemoryRead(), or _MemoryWrite().; Parameter(s): $iv_Pid - The Process ID of the program you want to open.; $iv_DesiredAccess - (optional) Set to 0x1F0FFF by default, which; enables all possible access rights to the; process specified by the Process ID.; $iv_InheritHandle - (optional) If this value is TRUE, all processes; created by this process will inherit the access; handle. Set to 1 (TRUE) by default. Set to 0; if you want it FALSE.; Requirement(s): None.; Return Value(s): On Success - Returns an array containing the Dll handle and an; open handle to the specified process.; On Failure - Returns 0; @Error - 0 = No error.; 1 = Invalid $iv_Pid.; 2 = Failed to open Kernel32.dll.; 3 = Failed to open the specified process.; Author(s): Nomad; Note(s):;==================================================================================Func_MemoryOpen($iv_Pid,$iv_DesiredAccess=0x1F0FFF,$iv_InheritHandle=1)IfNotProcessExists($iv_Pid)ThenSetError(1)Return0EndIfLocal$ah_Handle[2]=[DllOpen('kernel32.dll')]If@ErrorThenSetError(2)Return0EndIfLocal$av_OpenProcess=DllCall($ah_Handle[0],'int','OpenProcess','int',$iv_DesiredAccess,'int',$iv_InheritHandle,'int',$iv_Pid)If@ErrorThenDllClose($ah_Handle[0])SetError(3)Return0EndIf$ah_Handle[1]=$av_OpenProcess[0]Return$ah_HandleEndFunc;==================================================================================; Function: _MemoryRead($iv_Address, $ah_Handle[, $sv_Type]); Description: Reads the value located in the memory address specified.; Parameter(s): $iv_Address - The memory address you want to read from. It must; be in hex format (0x00000000).; $ah_Handle - An array containing the Dll handle and the handle; of the open process as returned by _MemoryOpen().; $sv_Type - (optional) The "Type" of value you intend to read.; This is set to 'dword'(32bit(4byte) signed integer); by default. See the help file for DllStructCreate; for all types. An example: If you want to read a; word that is 15 characters in length, you would use; 'char[16]' since a 'char' is 8 bits (1 byte) in size.; Return Value(s): On Success - Returns the value located at the specified address.; On Failure - Returns 0; @Error - 0 = No error.; 1 = Invalid $ah_Handle.; 2 = $sv_Type was not a string.; 3 = $sv_Type is an unknown data type.; 4 = Failed to allocate the memory needed for the DllStructure.; 5 = Error allocating memory for $sv_Type.; 6 = Failed to read from the specified process.; Author(s): Nomad; Note(s): Values returned are in Decimal format, unless specified as a; 'char' type, then they are returned in ASCII format. Also note; that size ('char[size]') for all 'char' types should be 1; greater than the actual size.;==================================================================================Func_MemoryRead($iv_Address,$ah_Handle,$sv_Type='dword')IfNotIsArray($ah_Handle)ThenSetError(1)Return0EndIfLocal$v_Buffer=DllStructCreate($sv_Type)If@ErrorThenSetError(@Error+1)Return0EndIfDllCall($ah_Handle[0],'int','ReadProcessMemory','int',$ah_Handle[1],'int',$iv_Address,'ptr',DllStructGetPtr($v_Buffer),'int',DllStructGetSize($v_Buffer),'int','')IfNot@ErrorThenLocal$v_Value=DllStructGetData($v_Buffer,1)Return$v_ValueElseSetError(6)Return0EndIfEndFunc;==================================================================================; Function: _MemoryWrite($iv_Address, $ah_Handle, $v_Data[, $sv_Type]); Description: Writes data to the specified memory address.; Parameter(s): $iv_Address - The memory address which you want to write to.; It must be in hex format (0x00000000).; $ah_Handle - An array containing the Dll handle and the handle; of the open process as returned by _MemoryOpen().; $v_Data - The data to be written.; $sv_Type - (optional) The "Type" of value you intend to write.; This is set to 'dword'(32bit(4byte) signed integer); by default. See the help file for DllStructCreate; for all types. An example: If you want to write a; word that is 15 characters in length, you would use; 'char[16]' since a 'char' is 8 bits (1 byte) in size.; Return Value(s): On Success - Returns 1; On Failure - Returns 0; @Error - 0 = No error.; 1 = Invalid $ah_Handle.; 2 = $sv_Type was not a string.; 3 = $sv_Type is an unknown data type.; 4 = Failed to allocate the memory needed for the DllStructure.; 5 = Error allocating memory for $sv_Type.; 6 = $v_Data is not in the proper format to be used with the; "Type" selected for $sv_Type, or it is out of range.; 7 = Failed to write to the specified process.; Author(s): Nomad; Note(s): Values sent must be in Decimal format, unless specified as a; 'char' type, then they must be in ASCII format. Also note; that size ('char[size]') for all 'char' types should be 1; greater than the actual size.;==================================================================================Func_MemoryWrite($iv_Address,$ah_Handle,$v_Data,$sv_Type='dword')IfNotIsArray($ah_Handle)ThenSetError(1)Return0EndIfLocal$v_Buffer=DllStructCreate($sv_Type)If@ErrorThenSetError(@Error+1)Return0ElseDllStructSetData($v_Buffer,1,$v_Data)If@ErrorThenSetError(6)Return0EndIfEndIfDllCall($ah_Handle[0],'int','WriteProcessMemory','int',$ah_Handle[1],'int',$iv_Address,'ptr',DllStructGetPtr($v_Buffer),'int',DllStructGetSize($v_Buffer),'int','')IfNot@ErrorThenReturn1ElseSetError(7)Return0EndIfEndFunc;==================================================================================; Function: _MemoryClose($ah_Handle); Description: Closes the process handle opened by using _MemoryOpen().; Parameter(s): $ah_Handle - An array containing the Dll handle and the handle; of the open process as returned by _MemoryOpen().; Return Value(s): On Success - Returns 1; On Failure - Returns 0; @Error - 0 = No error.; 1 = Invalid $ah_Handle.; 2 = Unable to close the process handle.; Author(s): Nomad; Note(s):;==================================================================================Func_MemoryClose($ah_Handle)IfNotIsArray($ah_Handle)ThenSetError(1)Return0EndIfDllCall($ah_Handle[0],'int','CloseHandle','int',$ah_Handle[1])IfNot@ErrorThenDllClose($ah_Handle[0])Return1ElseDllClose($ah_Handle[0])SetError(2)Return0EndIfEndFunc;==================================================================================; Function: SetPrivilege( $privilege, $bEnable ); Description: Enables (or disables) the $privilege on the current process; (Probably) requires administrator privileges to run;; Author(s): Larry (from autoitscript.com's Forum); Notes(s):; http://www.autoitscript.com/forum/index.php?s=&showtopic=31248&view=findpost&p=223999;==================================================================================Func SetPrivilege($privilege,$bEnable)Const$TOKEN_ADJUST_PRIVILEGES=0x0020Const$TOKEN_QUERY=0x0008Const$SE_PRIVILEGE_ENABLED=0x0002Local$hToken,$SP_auxret,$SP_ret,$hCurrProcess,$nTokens,$nTokenIndex,$priv$nTokens=1$LUID=DLLStructCreate("dword;int")IfIsArray($privilege)Then$nTokens=UBound($privilege)$TOKEN_PRIVILEGES=DLLStructCreate("dword;dword["&(3*$nTokens)&"]")$NEWTOKEN_PRIVILEGES=DLLStructCreate("dword;dword["&(3*$nTokens)&"]")$hCurrProcess=DLLCall("kernel32.dll","hwnd","GetCurrentProcess")$SP_auxret=DLLCall("advapi32.dll","int","OpenProcessToken","hwnd",$hCurrProcess[0],_"int",BitOR($TOKEN_ADJUST_PRIVILEGES,$TOKEN_QUERY),"int_ptr",0)If$SP_auxret[0]Then$hToken=$SP_auxret[3]DLLStructSetData($TOKEN_PRIVILEGES,1,1)$nTokenIndex=1While$nTokenIndex<=$nTokensIfIsArray($privilege)Then$priv=$privilege[$nTokenIndex-1]Else$priv=$privilegeEndIf$ret=DLLCall("advapi32.dll","int","LookupPrivilegeValue","str","","str",$priv,_"ptr",DLLStructGetPtr($LUID))If$ret[0]ThenIf$bEnableThenDLLStructSetData($TOKEN_PRIVILEGES,2,$SE_PRIVILEGE_ENABLED,(3*$nTokenIndex))ElseDLLStructSetData($TOKEN_PRIVILEGES,2,0,(3*$nTokenIndex))EndIfDLLStructSetData($TOKEN_PRIVILEGES,2,DllStructGetData($LUID,1),(3*($nTokenIndex-1))+1)DLLStructSetData($TOKEN_PRIVILEGES,2,DllStructGetData($LUID,2),(3*($nTokenIndex-1))+2)DLLStructSetData($LUID,1,0)DLLStructSetData($LUID,2,0)EndIf$nTokenIndex+=1WEnd$ret=DLLCall("advapi32.dll","int","AdjustTokenPrivileges","hwnd",$hToken,"int",0,_"ptr",DllStructGetPtr($TOKEN_PRIVILEGES),"int",DllStructGetSize($NEWTOKEN_PRIVILEGES),_"ptr",DllStructGetPtr($NEWTOKEN_PRIVILEGES),"int_ptr",0)$f=DLLCall("kernel32.dll","int","GetLastError")EndIf$NEWTOKEN_PRIVILEGES=0$TOKEN_PRIVILEGES=0$LUID=0If$SP_auxret[0]=0ThenReturn0$SP_auxret=DLLCall("kernel32.dll","int","CloseHandle","hwnd",$hToken)IfNot$ret[0]AndNot$SP_auxret[0]ThenReturn0return$ret[0]EndFunc;==>SetPrivilege#endregion

Share this post

Link to post

Share on other sites

darkjohn20 0

You have to understand how to scan for pointers. Look at some tutorials on their forum. As long as you keep the game open the whole time you find an address and try reading with AutoIt, it won't change, but if you re-open the game, it will.

Share this post

Link to post

Share on other sites

Cuervo 0

I don't know why, but I always assume that when people post they already know what address or offset they are dealing with. Given that, I then assume the issue is not with the address or offset and thus must be an issue with the code or permissions.